Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8jvx-gwwj-j77h

Опубликовано: 16 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 3%
0.00015
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 3 лет назад

In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 7.8
nvd
больше 3 лет назад

In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 3%
0.00015
Низкий

7.8 High

CVSS3